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5. SUMMARY OF CLAIMED SUBJECT MATTER 

Some aspects of the present inventive subject matter include, but are not limited to, 
methods, systems, transparent proxy servers, and media for brokering state information and 
identity among agents, servers, and proxies. More specifically: 

Independent Claim 1 

Claim 1. A method for brokering state information exchanged between computers using 
at least one protocol above a transport layer, the method comprising the steps of: [FIG. 7 and 
page 20 line 1 through page 27 line 17] 

receiving at a transparent proxy a request from a client requesting a resource of an 

origin server, wherein the transparent proxy is unknown to the client; [Page 20 lines 9- 

19] 

redirecting the client request from the transparent proxy to a policy module; [Page 
21 lines 3-5] 

obtaining at the transparent proxy policy enforcement data, wherein the policy 
enforcement data is received from the policy module and wherein the policy module and 
the transparent proxy reside within a same environment; [Page 22 lines 12-15; Also, see 
FIG. 6 item number 502 and 608 on page 17 line 21 and continuing to page 19 line 
22] 

generating at the transparent proxy a policy state token in response to the policy 
enforcement data; and transmitting the policy state token from the transparent proxy to the client, 
wherein the policy state token is used as an authentication of the client to the transparent proxy 
for subsequent interactions between the client and the transparent proxy. [Page 23 lines 6-23] 



Independent Claim 14 



Claim 14. A transparent proxy server comprising: [FIGS. 5 and 6 and starting at page 
15 line 3 and continuing to page 19 line 22] 
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a memory configured at least in part by a transparent proxy process; [Page 17 last 
line of page and continuing to page 18 line 1] 

a processor for running the transparent proxy process; [Page 18 lines 7-12] 
at least one link for networked communication between the transparent proxy 
process, on the one hand, and a client computer and an origin server, on the other hand; 
and [Page 18 lines 13-14] 

a policy module identifier which identifies a policy module that grants or denies 
authorization of proxy services to the client computer by acquiring policy enforcement 
data and attempting to authenticate the client computer to the transparent proxy process 
in response to the policy enforcement data, and wherein the client computer directs a 
request for a resource to an origin server and the request is intercepted by the transparent 
proxy process, which is unknown to the client computer, and used to determine the policy 
module identifier which identifies the policy module, and wherein the policy module 
authenticates the client computer to the transparent proxy process for subsequent 
interactions between the client computer and the transparent proxy process, and wherein 
the policy module processes within a same environment as the transparent process. [Page 
18 lines 17-18; page 19 lines 1-6; page 20 lines 13-19; page 30 lines 11-19; page 27 
lines 5-19; page 22 lines 12-15] 

Independent Claim 23 

Claim 23. A pair of state information brokering signals embodied in a distributed 
computer system, the system containing a client, a transparent proxy server having a transparent 
proxy server address, and a policy module having a policy module address, the pair of signals 
comprising: [FIGS. 7 and 10; page 20 line 1 continuing to page 27 line 18; and page 30 line 
20 continuing to page 31 line 20] 

a first signal including a redirection command which specifies the policy 
module address as a redirection target; and [Page 30 lines 20-23] 

a second signal including a redirection command which specifies the transparent 
proxy server address as a redirection target and also including policy enforcement data which 
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grants or denies authorization for the client to use a service of the transparent proxy server, and 
wherein the transparent proxy server controls access to the service based on client authentication 
to the proxy service achieved through the policy enforcement data, the first and second signal 
originating within a same environment that is external to the client, and wherein the transparent 
proxy server is unknown to the client. [Page 31 lines 4-11; and page 20 lines 11-19] 



Independent Claim 27 



Claim 27. A computer storage medium having a configuration that represents data 
and instructions which will cause performance of method steps for transparent proxy services, 
the method comprising the steps of: [FIG. 7 page 20 line 1 and continuing to page 27 line 18; 
also see page 17 lines 8-16] 

receiving at a transparent proxy a request from a client requesting a resource of an 

origin server, wherein the transparent proxy is unknown to the client; [Page 20 lines 9- 

19] 

redirecting the client request from the transparent proxy to a policy module; and 
[Page 21 lines 3-5] 

obtaining at the transparent proxy policy enforcement data provided by the policy 
module, the policy enforcement data granting or denying authorization for 
the client to access the resource through the transparent proxy, wherein the policy 
enforcement data is directed to authenticating the client to the transparent proxy and the 
transparent proxy vends access to the resource, and wherein the policy module and the 
transparent process execute within a same environment that is external to the client. [Page 22 
lines 12-15; page 24 lines 19-21; and page 26 lines 13-19] 
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CONCLUSION 

In accordance with 37 CFR 1.121, only the non-compliant sections of the Appellant's 
previously-submitted Appeal Brief has been included in this response. 

The Appellant respectfully submits that the Examiner withdraw the non-compliant status 
and examine the Appeal Brief as appropriate. 

The Examiner is invited to telephone Appellant's attorney at (513) 942-0224 to facilitate 
prosecution of this application. 

If necessary, please charge any additional fees or credit overpayment to Deposit Account 
No. 19-0743. 

Respectfully submitted, 



SCHWEGMAN, LUNDBERG & WOESSNER, P.A. 
P.O.Box 2938 
Minneapolis, MN 55402 
(513) 942-0224 



Date June 23, 2008 




